where is the token come from?

[ahmadadlan11]

token: qs.parse(window.location.search, { ignoreQueryPrefix: true })[ "token" ],

I think it came from the link that the user used to access the site is that right?

[adonese]

Yo. This document can help you more:

https://github.com/adonese/noebs-docs/blob/master/misc/biller_system.md

But in brief:

• you generate a payment token (/token)
• you use the data in the payment token to satisfy the payment
• we grab the token, the id, etc and verify them

And you can also find relevant code here:

https://github.com/adonese/noebs/blob/bfaff15b84da8f95732869fbcaee8ba25a0c5712/consumer/payment_apis.go#L21-L63

This is the handler for the code you shared:

https://github.com/adonese/noebs/blob/bfaff15b84da8f95732869fbcaee8ba25a0c5712/consumer/payment_apis.go#L1120-L1204

And last, all the code is in: consumer/payment_apis.go in noebs